$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a097af28-8a8b-38d4-b862-8811b0f968e9.roa File: a097af28-8a8b-38d4-b862-8811b0f968e9.roa (raw, json) Hash identifier: Ke4Athxd7l1PAs3g+Lk4ytx9qvpZumKbp8O0TiL7DUs= Subject key identifier: 15:56:B7:FB:B0:21:60:92:95:D6:D6:2B:F2:FA:6E:D8:25:BD:B9:DD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584D237A40538E9FA43CE349FF00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a097af28-8a8b-38d4-b862-8811b0f968e9.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 12041 IP address blocks: 161.232.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:40:53:8e:9f:a4:3c:e3:49:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=7aa722b0-cd96-409e-8409-fb21b093665c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:64:40:3a:19:09:4a:cf:21:42:88:8a:b3: e7:1f:2d:d3:a6:82:c3:0d:39:64:68:c0:2a:7e:e3: 5e:6f:e8:0c:9b:de:67:13:43:7e:83:cf:3a:17:0f: 0d:cf:33:7b:b7:66:97:ad:ec:e6:f2:f4:ae:56:bb: 1d:28:9d:9b:ea:99:83:43:ea:20:6d:18:9b:08:4b: 6f:6b:bf:71:c1:3f:1c:43:9f:48:4c:05:60:33:e8: fa:65:7b:be:91:b0:fe:20:60:f7:5a:82:18:1e:33: e4:f8:15:68:a0:dc:7b:d2:5c:87:a9:5a:d7:b1:5b: 76:38:dd:11:e7:d6:b9:e8:a8:14:37:45:ac:64:92: 12:01:c5:1d:1e:7c:ad:8b:1f:73:07:d0:cc:77:1c: 79:d2:38:db:2d:6a:fb:fc:04:e2:21:03:75:2d:0f: 2d:f6:8e:cf:97:bc:0a:5b:62:6a:83:ec:16:ea:bf: bb:dd:1c:be:02:d2:17:31:57:92:98:7e:2a:58:7f: ab:22:5c:f0:84:bc:03:6d:43:81:50:ae:55:9f:08: 59:7f:9a:ba:a3:50:ca:80:11:6f:45:48:50:c6:da: 31:5f:52:a7:61:a3:57:fe:97:ee:a2:4d:fa:bc:11: 96:6f:72:d7:46:78:50:69:71:80:89:93:da:96:6d: 6f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:56:B7:FB:B0:21:60:92:95:D6:D6:2B:F2:FA:6E:D8:25:BD:B9:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a097af28-8a8b-38d4-b862-8811b0f968e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a0:cb:0a:d9:ff:36:e3:d4:a4:de:1b:f3:36:25:32:a1:34: 06:b8:14:89:ae:1c:04:93:37:91:67:ae:34:45:41:a5:46:51: 44:81:3b:27:be:d9:6c:c2:d1:62:74:fc:b7:1f:79:47:2d:6c: 4a:0f:31:5c:f0:0d:0d:e0:25:de:76:52:68:bb:0e:ad:e2:1a: f1:2d:3c:da:3f:b0:88:d7:85:32:b3:0c:4f:73:92:c0:03:fa: 20:82:34:d3:08:2d:8e:a5:e3:51:40:8f:2b:b5:d5:b0:63:3d: 6f:68:16:c5:b3:8c:1d:d5:63:a6:99:cf:5e:76:dc:98:2f:b7: 40:0a:2f:bf:e5:4e:68:fb:5b:32:c1:0d:22:c5:55:c8:00:e9: ac:ce:c0:27:db:fc:b8:16:ad:57:ef:a6:2d:b2:6e:18:e4:28: 5c:b1:6f:42:6e:75:e5:22:a6:8f:75:19:e6:4c:d2:de:cb:f4: 96:6c:51:7a:05:f0:d3:4b:a1:97:a0:37:d7:46:f3:10:2f:0a: c6:bf:2e:92:21:6c:c8:de:1a:39:14:bc:84:3c:5d:c9:f0:33: 0a:e5:79:31:4b:ba:ed:d1:43:ec:5d:bc:cc:f9:1b:64:fa:3b: ec:7d:9b:06:dc:60:37:9f:84:f1:da:62:f4:7d:f9:a5:d1:11: 6c:7a:75:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekBTjp+kPONJ/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk N2FhNzIyYjAtY2Q5Ni00MDllLTg0MDktZmIyMWIwOTM2NjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOlkQDoZCUrPIUKIirPnHy3TpoLDDTlkaMAq fuNeb+gMm95nE0N+g886Fw8NzzN7t2aXrezm8vSuVrsdKJ2b6pmDQ+ogbRibCEtv a79xwT8cQ59ITAVgM+j6ZXu+kbD+IGD3WoIYHjPk+BVooNx70lyHqVrXsVt2ON0R 59a56KgUN0WsZJISAcUdHnytix9zB9DMdxx50jjbLWr7/ATiIQN1LQ8t9o7Pl7wK W2Jqg+wW6r+73Ry+AtIXMVeSmH4qWH+rIlzwhLwDbUOBUK5VnwhZf5q6o1DKgBFv RUhQxtoxX1KnYaNX/pfuok36vBGWb3LXRnhQaXGAiZPalm1vsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVWt/uwIWCSldbWK/L6btglvbndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTA5N2FmMjgtOGE4Yi0z OGQ0LWI4NjItODgxMWIwZjk2OGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISgywrZ/zbj1KTeG/M2JTKhNAa4FImuHASTN5FnrjRFQaVGUUSBOye+ 2WzC0WJ0/LcfeUctbEoPMVzwDQ3gJd52Umi7Dq3iGvEtPNo/sIjXhTKzDE9zksAD +iCCNNMILY6l41FAjyu11bBjPW9oFsWzjB3VY6aZz1523Jgvt0AKL7/lTmj7WzLB DSLFVcgA6azOwCfb/LgWrVfvpi2ybhjkKFyxb0JudeUipo91GeZM0t7L9JZsUXoF 8NNLoZegN9dG8xAvCsa/LpIhbMjeGjkUvIQ8XcnwMwrleTFLuu3RQ+xdvMz5G2T6 O+x9mwbcYDefhPHaYvR9+aXREWx6dds= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:44 2026 by rpki-client